SAML Decoder Question w.r.t IdP

[Cantor, Scott]

On 6/26/12 9:02 PM, "Joshua Brodie" <josbrodie at gmail.com> wrote:
>
>The sticking point:  when user is redirected to another application,
>their session persists in the IdP - i.e. the user can hit the browser
>back-button and pick-up where they left off in the IdP - I need to
>prevent this; i.e. when user is redirected to other app, all IdP
>session is killed and they will get the standard error.jsp page -
>would you be able to give pointers on how to achieve this?

I think you can call an "unbindLoginContext" method to do this, but you
should take a look at the AuthenticationEngine code, and raise any
questions on the dev list.

-- Scott